ReadonlyhooksReadonlysettingsThe rendered settings block to add to the harness's hooks config — JSON for
Claude Code (.claude/settings.json), TOML [[hooks.<event>]] for Codex
(config.toml). The CLI prints this; the structured hooks above is the
Claude-Code-shaped intermediate.
ReadonlystampSHA-256 of the sanctioned source — the runtime refuses an artifact whose stamp differs.
A compiled hook program: the harness block + a tamper-evident stamp.